What is claimed is: 



1 . A method of binding content to a hub network, comprising: 

receiving a request to bind a discrete version of content to a hub network 
5 including a server and a client as members of said hub network, wherein said discrete 
version includes discrete locked content data; 
disabling said discrete version; 

creating a source version of said content stored on said server, wherein said 
source version includes source locked content data; and 
10 creating a root license stored on said server, wherein said root license is bound to 

said hub network. 

2. The method of claim 1 , further comprising: 

receiving said discrete version stored on compliant media; 
15 wherein compliant media is readable and writable electronic storage media. 

3 . The method of claim 1 , wherein: 

said discrete version has a corresponding discrete license. 

20 4. The method of claim 3, wherein: 

disabling said discrete version includes disabling said discrete license. 

5. The method of claim 3, wherein: 

creating said root license includes creating said root license according to said 

25 discrete license. 

6. The method of claim 1 , wherein: 

said server will decrypt said discrete locked content data after disabling said 

discrete version upon request. 
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7. The method of claim 1 , wherein: 

said root license indicates said server has root responsibility for said source 



version. 



8. The method of claim 1, further comprising: 

creating a copy of said discrete locked content data; and 
storing said copy as said source locked content data. 

9. The method of claim 1 , further comprising: 

creating bound licensing authority data according to discrete licensing authority 

data; 

wherein said discrete licensing authority data corresponds to said discrete version 
and said discrete licensing authority data indicates an external server is an external 
licensing authority, 

said bound licensing authority data corresponds to said source version and said 
bound licensing authority data indicates said root license is a local licensing authority and 
said external server is an external licensing authority. 

1 0. The method of claim 1 , wherein: 

said discrete version has a corresponding revocation list of one or more devices 
for which authorization to participate in a hub network has been revoked. 

1 1. The method of claim 10, further comprising: 

checking whether said server is in said revocation list before disabling said 
discrete version and creating said source version. 

12. The method of claim 10, further comprising: 

updating a server revocation list stored by said server according to said revocation 

list of said discrete version; and 
3 checking whether said server is in said server revocation list before disabling said 

discrete version and creating said source version. 
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13. The method of claim 10, further comprising: 

creating a revocation list corresponding to said source version by creating a copy 
of said revocation list corresponding to said discrete version. 

14. The method of claim 1, wherein: 

said server and said client are both compliant devices, 

a compliant device will not decrypt locked content data without a license that is 
bound to a hub network of which the compliant device is a member. 

15. The method of claim 14, wherein: 

a non-member compliant device that is not a member of said hub network will 
decrypt said discrete locked content data upon request while said discrete version is not 
disabled, but said non-member compliant device will not decrypt said discrete locked 
content data while said discrete version is disabled. 

16. The method of claim 1, further comprising: 

creating a source key by copying a discrete key; 

wherein said discrete key is for decrypting said discrete locked content data, and 
said source key is for decrypting said source locked content data. 

17. The method of claim 16, wherein: 

said discrete locked content data is encrypted using a content encryption 

technique, 

said source locked content data is encrypted using said content encryption 
technique, 

said discrete key is encrypted using a hub network encryption technique that is 
different from said content encryption technique, and 

said source key is encrypted using said hub network encryption technique. 
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18. The method of claim 17, wherein: 

said server stores a hub network key for decrypting data encrypted using said hub 

network encryption technique. 

19. The method of claim 17, wherein: 

said hub network encryption technique is different from said content encryption 
technique because said hub network encryption technique uses a different key for 
encrypting data than the key that said content encryption technique uses for encrypting 
data. 

20. The method of claim 17, wherein: 

said root license is encrypted using said hub network encryption technique. 

21. A method of freeing content bound to a hub network, comprising: 

receiving a request to free a source version of content from a hub network 
including a server and a client as members of said hub network, wherein said source 
version is stored on said server, includes source locked content data, and has a 
corresponding root license bound to said hub network; 

disabling said source version; and 

creating a discrete version of said content, wherein said discrete version includes 
discrete locked content data. 

22. The method of claim 21, further comprising: 

checking whether compliant media is available to store said discrete version 
before disabling said source version and creating said discrete version; and 
storing said discrete version on available compliant media; 
wherein compliant media is readable and writable electronic storage media. 

23. The method of claim 21, further comprising: 

disabling a sub-copy version of said content stored on said client; 

wherein said sub-copy version includes a copy of said source locked content data. 
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24. The method of claim 21, wherein: 

disabling said source version includes disabling said root license. 

5 25 The method of claim 21, wherein: 

said server will not decrypt said source locked content data after disabling said 

source version. 



26 The method of claim 21, further comprising: 

creating a discrete license corresponding to said discrete version according to said 



10 
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20 



root license. 

27. The method of claim 21, further comprising: 

creating a copy of said source locked content data; and 
storing said copy as said discrete locked content data. 

28 The method of claim 21, further comprising: 

creating discrete licensing authority data according to bound licensing authority 

data; 

wherein said bound licensing authority data corresponds to said source version 
and said bound licensing authority data indicates said root license is a local licensing 



authority and an external server is an external licensing authority, and 

said discrete licensing authority data corresponds to said discrete version and said 
discrete licensing authority data indicates said external server is an external licensing 
25 authority. 

29 The method of claim 21, wherein: 

said source version has a corresponding revocation list of one or more devices for 
which authorization to participate in a hub network has been revoked. 
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30 The method of claim 29, further comprising: 
checking whether said server is in said revocation list before disabling said source 

version and creating said discrete version. 

31 The method of claim 29, further comprising: 
updating a server revocation list stored by said server according to said revocation 

list of said source version; and 

checking whether said server is in said server revocation list before disabling said 

source version and creating said discrete version. 

32 The method of claim 29, further comprising: 

creating a revocation list corresponding to said discrete version by creating a copy 
of said revocation list corresponding to said source version. 

15 33. The method of claim 21, wherein: 

said server and said client are both compliant devices, 

a compliant device will not decrypt locked content data without a license that is 
bound to a hub network of which the compliant device is a member. 
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20 34. The method of claim 21, further comprising: 

creating a discrete key by copying a source key; 

wherein said source key is for decrypting said source locked content data, and 
said discrete key is for decrypting said discrete locked content data. 

25 35 The method of claim 34, wherein: 

said source locked content data is encrypted using a content encryption technique, 
said discrete locked content data is encrypted using said content encryption 
technique, 

said source key is encrypted using a hub network encryption technique that is 
different from said content encryption technique, and 

said discrete key is encrypted using said hub network encryption technique. 
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36 The method of claim 35, wherein: 

said hub network encryption technique is different font said content encryption 
technique because said hub network encryption technique uses a different key for 
encrypting data than the key that said content encryption technique uses for encrypUng 
data. 

37 The method of claim 35, wherein: 

said root license is encrypted using said hub network encryption technique. 



38 The method of claim 35, wherein: 

said server stores a hub network key for decrypting data encrypted using satd hub 

network encryption technique. 

39 A method of binding content to a hub network, comprising: 

receiving a request to bind a discrete instance to a hub network including a server 
and a client as members of said hub network, wherein said discrete instance includes 
discrete locked content data, a discrete license, and discrete licensing authortty data; 

disabling said discrete instance; and 

creating a bound instance, wherein said bound instance includes source locked 
content data, a root license, and bound licensing authority data; 
wherein said root license is bound to said hub network. 

40 A method of freeing content bound to a hub network, comprising: 

receiving a request to free a bound instance from a hub network including a server 

and a client as members of said hub network, wherein said bound instance includes 

source locked content data, a root license, and bound licensing authority data, wherem 

said root license is bound to said hub network; 
disabling said bound instance; and 

creating a discrete instance, wherein said discrete instance includes discrete 
locked content data, a discrete license, and discrete licensing authority data. 
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41. A discrete instance of content, comprising: 
locked content data; 

a key for decrypting said locked content data; 
a license; and 
licensing authority data; 



10 



wherein said discrete instance is stored on compliant media that is readable and 

writable storage media, 

said locked content data is encrypted using a content encryption technique, and 
said key is encrypted using a hub network encryption technique that is different 

from said content encryption technique. 



42 The discrete instance of claim 41, wherein: 

said hub network encryption technique is different from said content encryption 
15 technique because said hub network encryption technique uses a different key for 

encrypting data than the key that said content encryption technique uses for encrypting 
data. 

43 The discrete instance of claim 41, wherein: 

20 ' said licensing authority data is stored as header data for said locked content data. 

44 The discrete instance of claim 41 , wherein: 

said licensing authority data indicates an external server is an external licensing 

authority. 

25 

45. The discrete instance of claim 41, wherein: 

said license is encrypted using said hub network encryption technique. 

46 The discrete instance of claim 41, wherein: 
30 said license indicates said discrete instance is permitted to be bound to a hub 

network if said discrete instance is disabled. 
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47. The discrete instance of claim 41, wherein: 

said license indicates copying said locked content data is permitted. 

48. The discrete instance of claim 41, wherein: 

said license indicates copying said license is not permitted. 



49. An article of compliant media storing at least: 
a discrete set of data including: 
10 locked content data, 

a key for decrypting said locked content data, 
a license, and 
licensing authority data; 
wherein said locked content data is encrypted using a content encryption 

15 technique, 

said key is encrypted using a hub network encryption technique that is different 
from said content encryption technique, 

said compliant media is readable and writable storage media, 
at least part of said discrete set of data is encrypted using a compliance encryption 
20 technique, such that a compliant device stores a compliance key for decrypting said 
encrypted at least part of said discrete set of data. 

50. A bound instance of content, comprising: 

source locked content data stored on a server that is a member of a hub network; 
25 a source key stored on said server for decrypting said source locked content data; 

a root license stored on said server; and 
licensing authority data stored on said server; 
wherein said root license is bound to said hub network, 
said locked content data is encrypted using a content encryption technique, and 
30 said source key is encrypted using a hub network encryption technique that is 

different from said content encryption technique. 
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51 The bound instance of claim 50, wherein: 

said hub network encryption technique is different from said content encryption 
technique because said hub network encryption technique uses a different key for 
5 encrypting data than the key that said content encryption technique uses for encryptmg 
data. 

52 The bound instance of claim 50, wherein: 

said server stores a hub network key for decrypting data encrypted using said hub 

10 network encryption technique. 

53 The bound instance of claim 50, wherein: 

said root license is encrypted using said hub network encryption technique. 

15 54 The bound instance of claim 50, wherein: 

said root license indicates said bound instance is permitted to be freed from said 
hub network if said bound instance is disabled. 

55 The bound instance of claim 54, wherein: 

20 freeing said bound instance includes creating a discrete instance that is not bound 

to said hub network. 

56 The bound instance of claim 50, wherein: 

said root license indicates decrypting said source locked content data is permitted 

25 for said server. 

57. The bound instance of claim 50, wherein: 

said root license indicates moving said source locked content data from said 
server to another member of said hub network is not permitted. 
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58 The bound instance of claim 50, wherein: 

said root license indicates copying said source locked content data is permitted. 

59. The bound instance of claim 50, wherein: 

5 said root license indicates copying said root license is not permitted. 

60. The bound instance of claim 50, wherein: 

said root license indicates creating a sub-copy version of said source locked 

content data is permitted, 

said root license defines permissions for a sub-copy license, and 
said sub-copy version includes a copy of said source locked content data and has a 
.spending sub-copy license indicating permissions according to said root license. 



10 



corres 



61 The bound instance of claim 50, wherein: 

15 said licensing authority data is stored as header data for said source locked 

content data. 

62 The bound instance of claim 50, wherein: 

said licensing authority data indicates said server is a local licensing authority and 
20 an external server is an external licensing authority. 

63. The bound instance of claim 50, further comprising: 

sub-copy locked content data stored on a client that is a member of said hub 
network and connected to said server; 
25 a sub-copy license stored on said client; and 

a client copy of said licensing authority data stored on said client. 

64. The bound instance of claim 63, wherein: 

said sub-copy license indicates decrypting said sub-copy locked content data is 

30 permitted for said client. 
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65 The bound instance of claim 63, wherein: 
said sub-copy license indicates decrypting said sub-copy locked content data is 

permitted for a member of said hub network. 

66 The bound instance of claim 63, wherein: 
said sub-copy license indicates moving said sub-copy locked content data from 

said client to another member of said hub network is permitted. 

67 The bound instance of claim 63, wherein: 
said sub-copy license indicates copying said sub-copy locked content data is 

permitted. 

68 The bound instance of claim 63, wherein: 
said sub-copy license indicates copying said sub-copy license is not permitted. 

69 The bound instance of claim 63, wherein: 
said sub-copy license indicates creating a sub-copy version of said sub-copy 

locked content data is permitted, 

said sub-copy license defines permissions for another sub-copy license, and 
said sub-copy version includes a copy of said sub-copy locked content data and 
has a corresponding second sub-copy license indicating permissions according to said 
sub-copy license. 

70 The bound instance of claim 63, wherein: 
25 said sub-copy license indicates creating a sub-copy version of said sub-copy 

locked content data is permitted, 

said sub-copy license defines permissions for another sub-copy license, and 
said sub-copy version includes a copy of said sub-copy locked content data and 

has a corresponding new client copy of said licensing authority data. 
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